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CLAIMS : 

What is claimed is: 

1. A method for integrating a plurality of servers, 
comprising the steps of: 

transmitting, from a first server within the 
plurality of servers, an authentication request to 
authenticate a user in an existing database registry; 

responsive to receiving the authentication request 
to authenticate the user in the existing database 
registry, constructing, by the first server, a credential 
of the user; and 

accessing a resource from a second server within the 
plurality of servers based on the credential of the user 
and a protection policy applied to the resource in an 
object name space associated with the first server. 

2. The method as recited in claim 1, wherein the first 
server is an authentication server. 

3. The method as recited in claim 1, wherein the second 
server is an application server. 

4. The method as recited in claim 1, wherein the 
plurality of servers are heterogeneous servers. 

5. The method as recited in claim 1, wherein the 
application constructs a credential of the user using a 
user identifier and a user password. 



6. The method as recited in claim 1, wherein registry 
information in the existing database registry includes at 
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least one of user registry information and group registry 
information. 

7. The method as recited in claim 1, wherein 
integrating the plurality of servers is integrated with 
the use of an adapter. 

8. The method as recited in claim 7, wherein the 
adapter is a user registry adapter, 

9* The method as recited in claim 1, further 
comprising: 

storing a definition of the user in a database 
associated with the second server. 

10. The method as recited in claim 1, further 
comprising : 

creating an application specific database in the 
second server; and 

protecting application specific data required for an 
operation of the second server, 

11. The method as recited in claim 1, wherein the 
application specific database is a meta-data database, 

12. The method as recited in claim 1, wherein the 
resource is a Web resource. 

13. The method as recited in claim 1, further 
comprising : 

responsive to a request to disable a user from 
accessing a resource on the second server, receiving the 



32 

Docket No. AUS920010374US1 



disable request by an adapter integrating the plurality 
of servers; and 

removing a definition associated with the user from 
a database associated with the second server. 

14. The method as recited in claim 1, further 
comprising: 

responsive to a request to disqualify a user from 
accessing a resource on the second server, receiving the 
disqualification request by an adapter integrating the 
plurality of servers; 

removing a definition associated with the user from 
a first database associated with the second server; and 

removing a definition associated with the user from 
a second database associated with the second server. 

15. The method as recited in claim 14, wherein the first 
database is a registry database and the second database 
is a meta-data database. 

16. A system, comprising: 
a bus system; 

a memory, including a set of instructions, connected 
to the bus system; and 

a processing unit, including at least one processor, 
wherein the processing unit executes the set of 
instructions to transmit, from a first server within a 
plurality of servers, an authentication request to 
authenticate a user in an existing database registry, 
responsive to receiving the authentication request to 
authenticate the user in the existing database registry, 
constructing, but the first server, a credential of the 
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user, and accessing a resource from a second server 
within the plurality of servers based on the credential 
of the user and a protection policy applied to the 
resource in an object name space associated with the 
first server. 

17. A system for integrating a plurality of servers, 
comprising: 

transmitting means for transmitting, from a first 
server within the plurality of servers, an authentication 
request to authenticate a user in an existing database 
registry; 

constructing means, responsive to receiving the 
authentication request to authenticate the user in the 
existing database registry, for constructing, by the 
first server, a credential of the user; and 

accessing means for accessing a resource from a 
second server within the plurality of servers based on 
the credential of the user and a protection policy 
applied to the resource in an object name space 
associated with the first server. 

18. A computer program product in a computer-readable 
medium for integrating a plurality of servers, 
comprising : 

instructions for transmitting, from a first server 
within the plurality of servers, an authentication 
request to authenticate a user in an existing database 
registry; 

instructions, responsive to receiving the 
authentication request to authenticate the user in the 
existing database registry, for constructing, by the 
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first server, a credential of the user; and 

instructions for accessing a resource from a second 
server within the plurality of servers based on the 
credential of the user and a protection policy applied to 
the resource in an object name space associated with the 
first server. 

19. The computer program product as recited in claim 18, 
wherein the first server is an authentication server. 

20. The computer program product as recited in claim 18, 
wherein the second server is an application server. 

21. The computer program product as recited in claim 18, 
wherein the plurality of servers are heterogeneous 
servers . 

22. The computer program product as recited in claim 18, 
wherein the application constructs a credential of the 
user using a user identifier and a user password. 

23. The computer program product as recited in claim 18, 
wherein registry information in the existing database 
registry includes at least one of user registry 
information and group registry information. 

24. The computer program product as recited in claim 18, 
wherein integrating the plurality of servers is 
integrated with the use of an adapter. 

25. The computer program product as recited in claim 24, 
wherein the adapter is a user registry adapter. 
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26. The computer program product as recited in claim 18, 
further comprising : 

instructions for storing a definition of the user in 
a database associated with the second server. 

27. The computer program product as recited in claim 18, 
further comprising: 

instructions for creating an application specific 
database in the second server; and 

instructions for protecting application specific 
data required for an operation of the second server. 

28. The computer program product as recited in claim 18, 
wherein the application specific database is a meta-data 
database . 

29. The computer program product as recited in claim 18, 
wherein the resource is a Web resource. 

30. The computer program product as recited in claim 18, 
further comprising: 

instructions, responsive to a request to disable a 
user from accessing a resource on the second server, for 
receiving the disable request by an adapter integrating 
the plurality of servers; and 

instructions for removing a definition associated 
with the user from a database associated with the second 
server . 



31. The computer program product as recited in claim 18, 
further comprising: 
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instructions, responsive to a request to disqualify 
a user from accessing a resource on the second server, 
for receiving the disqualification request by an adapter 
integrating the plurality of servers; 

instructions for removing a definition associated 
with the user from a first database associated with the 
second server; and 

instructions for removing a definition associated 
with the user from a second database associated with the 
second server. 

32. The computer program product as recited in claim 31, 
wherein the first database is a registry database and the 
second database is a meta-data database. 



